This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft File: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft (raw, json) Hash identifier: YOATMCdc27eSpqLdlWfHsF3tCagEo0H+zW3owU4j9GI= Subject key identifier: 9B:A6:E5:9D:D3:14:4C:F1:5F:DF:35:FE:2E:D5:EB:9C:93:FC:53:73 Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4 Certificate issuer: /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4 Certificate serial: 019BF7638FD131EE196D7309951A36B5B33E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft Manifest number: 0E82 Signing time: Sun 25 Jan 2026 23:00:55 +0000 Manifest this update: Sun 25 Jan 2026 23:00:55 +0000 Manifest next update: Mon 26 Jan 2026 23:00:55 +0000 Files and hashes: 1: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl (hash: f5ox8l4cPPdXFg0O4Z8iQrWTcWXGZCzUwjfrK+LHxKA=) 2: HmW_P23dUzDRtMsd-FLLjzvvQa4.roa (hash: +e6sg8X7k7p+1a6dzNwEOYu3V1hao2K2yzgqgc3LBN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:8f:d1:31:ee:19:6d:73:09:95:1a:36:b5:b3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4 Validity Not Before: Jan 25 23:00:55 2026 GMT Not After : Jan 26 23:00:55 2026 GMT Subject: CN=9ba6e59dd3144cf15fdf35fe2ed5eb9c93fc5373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dc:7c:0b:51:a8:02:1e:2c:99:a9:33:5a:3d: e7:d4:c5:6a:56:82:b3:9b:ea:70:28:f5:4c:93:57: a0:9a:fd:37:de:84:48:be:e5:b1:7b:ba:f6:9e:a6: cf:74:1d:17:6e:bf:4a:26:3e:c8:52:e9:35:2d:93: e3:b8:e4:a6:14:69:7e:70:a5:3c:1f:44:e2:b7:10: 06:40:6c:bc:99:e7:2e:4f:79:bf:ca:6b:d2:a4:d2: aa:98:e4:37:e8:28:d2:e5:75:83:ac:8a:77:a7:d5: 5a:4e:3a:cb:af:5e:fc:4f:6d:88:44:23:99:ca:15: d0:14:6e:b5:6b:aa:1d:45:34:3f:54:e0:c4:0b:9b: 19:a5:6b:b9:ab:57:e5:ec:e3:08:7f:d2:94:da:b3: b0:74:9d:0c:74:2c:b5:42:cb:c1:7a:e9:35:af:36: 4f:2b:53:f9:5f:14:65:35:97:45:1d:c3:29:68:88: cf:c0:2a:84:c7:26:27:03:13:49:5d:62:29:39:e1: a3:96:6c:0a:96:89:c6:42:f8:bf:66:ed:34:97:64: 66:4c:58:4d:60:f2:c4:0d:09:bf:06:86:db:95:c8: 95:3b:60:ac:70:ec:b8:75:c6:12:de:53:44:ac:42: 72:c1:9e:4e:fc:83:7e:0b:70:40:3a:d0:64:dd:7f: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A6:E5:9D:D3:14:4C:F1:5F:DF:35:FE:2E:D5:EB:9C:93:FC:53:73 X509v3 Authority Key Identifier: keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:de:d8:8e:58:64:9b:84:e7:10:ed:44:d9:a8:89:a2:23:8a: f2:57:5d:67:17:51:e1:10:9e:61:74:fc:dc:19:b2:0e:1d:62: 4c:1a:88:e5:8f:36:56:e5:91:0a:e7:96:08:55:a5:02:cf:0f: 5e:66:ab:78:51:41:56:96:7a:38:93:4b:95:5f:a5:2f:bb:7c: dd:aa:4d:ff:00:97:32:34:62:e8:b2:fb:f8:8e:f5:91:97:9a: b3:43:97:46:0b:09:a4:55:72:6d:e7:5a:93:47:e9:44:9a:52: 80:b1:7d:25:c2:20:17:ea:94:df:9b:0a:76:3a:18:e4:6e:36: bd:41:a1:4f:0e:97:d8:96:08:7a:93:52:1e:9c:b0:e6:de:fe: 27:66:50:12:ef:5a:8a:92:ec:69:c5:db:fc:86:01:31:96:a7: 1d:92:c1:8e:64:f6:97:ef:4a:6b:f8:8c:25:ca:ca:d5:67:6c: 05:8b:13:44:32:49:ff:bf:f0:39:0d:57:1d:ea:cf:9f:07:cd: ff:1f:2b:4d:6d:42:87:2f:25:ec:3f:f5:de:39:34:61:7c:32: 96:23:19:a6:00:cc:d5:76:24:78:36:dd:26:f9:1c:90:fa:e8: b7:c2:d6:86:75:9b:1a:da:85:ca:2e:d7:01:1c:1c:3a:a0:4f: 3f:64:80:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y4/RMe4ZbXMJlRo2tbM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI4YTQxNWUxZmE3MmNlMWQwM2NkNzYyMTljZTFiNzdj NjU1YzQwHhcNMjYwMTI1MjMwMDU1WhcNMjYwMTI2MjMwMDU1WjAzMTEwLwYDVQQD Eyg5YmE2ZTU5ZGQzMTQ0Y2YxNWZkZjM1ZmUyZWQ1ZWI5YzkzZmM1MzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNx8C1GoAh4smakzWj3n1MVqVoKz m+pwKPVMk1egmv033oRIvuWxe7r2nqbPdB0Xbr9KJj7IUuk1LZPjuOSmFGl+cKU8 H0TitxAGQGy8mecuT3m/ymvSpNKqmOQ36CjS5XWDrIp3p9VaTjrLr178T22IRCOZ yhXQFG61a6odRTQ/VODEC5sZpWu5q1fl7OMIf9KU2rOwdJ0MdCy1QsvBeuk1rzZP K1P5XxRlNZdFHcMpaIjPwCqExyYnAxNJXWIpOeGjlmwKlonGQvi/Zu00l2RmTFhN YPLEDQm/BobblciVO2CscOy4dcYS3lNErEJywZ5O/IN+C3BAOtBk3X8T6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJum5Z3TFEzxX981/i7V65yT/FNzMB8GA1UdIwQY MBaAFAFiikFeH6cs4dA812IZzht3xlXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdLS1FWNGZweXpoMER6WFlobk9HM2ZHVmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84MWNlMzYtZjk1Mi00MjljLThmYmIt N2ZmOTJmNmRjM2E0LzEvQVdLS1FWNGZweXpoMER6WFlobk9HM2ZHVmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC84MWNlMzYtZjk1Mi00MjljLThmYmItN2ZmOTJmNmRjM2E0 LzEvQVdLS1FWNGZweXpoMER6WFlobk9HM2ZHVmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJN7Yjlhk m4TnEO1E2aiJoiOK8lddZxdR4RCeYXT83BmyDh1iTBqI5Y82VuWRCueWCFWlAs8P XmareFFBVpZ6OJNLlV+lL7t83apN/wCXMjRi6LL7+I71kZeas0OXRgsJpFVybeda k0fpRJpSgLF9JcIgF+qU35sKdjoY5G42vUGhTw6X2JYIepNSHpyw5t7+J2ZQEu9a ipLsacXb/IYBMZanHZLBjmT2l+9Ka/iMJcrK1WdsBYsTRDJJ/7/wOQ1XHerPnwfN /x8rTW1Chy8l7D/13jk0YXwyliMZpgDM1XYkeDbdJvkckProt8LWhnWbGtqFyi7X ARwcOqBPP2SAKw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:24 2026 by rpki-client